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12 November 1976 


MEMORANDUM FOR: Associate Deputy Director for Operations 

FROM : John F. Blake 

Deputy Director for Administration 


Ted: 


1. I write in connection with your 4 November 
1976 memorandum to me (D/0 76-8281) on 'Security of 
Sensitive Information”. I have some reason to believe 
that, based on recent discussions between mutual _ 
representatives of ours, the task you ask of us in the 
referent memorandum may not now necessarily be valid. 
While we are willing to undertake the study you. request 
and present you with our assessment, I thought it might 
be in order that you take one more look and let me know 
if the totality of the undertaking is still what you 
desire . 


2. It goes without saying that we will be as help- 
ful as possible on what ever you would like. 


< 5 />^ 

John F. Blake 
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4 NOV 1976 


DD/A Registry 


MEMORANDUM FOR: Deputy Director for Administration 

FROM: Theodore G. Shackley 

Associate Deputy Director for Operations 

SUBJECT: Security of Sensitive Information 


1. Implementation of the new General Accounting System 
(GAS) has brought to our attention the need to reassess the 
security of the Agency-wide data systems. In view of the 
technical advances which are being made through GAS and other 
systems, it appears that a greater level of detail and greater 
meclmical manipulation of detail regarding operational data 
may possibly be providing security problems. 


2. In order that the DDO and I may be assured that we 
are carrying out our responsibilities for the security of 
highly sensitive data, I respectfully request that you pro- 
vide me with your assessment of the security arra ng ements 
jvhi£kji Cfir.s 
under cover, the true names or cryptonyms of financial and/or 

personnel trans actions concerning agents , li aison services, 
and t ran s a c t ions'"’ in vo’ i ving'aEIi eF'"Teris it ive op c rat ib'ti s . 

3. I am particularly concerned with steps which might 
be necessary to either limit the input of sensitive data to 
systems not under complete DDO control or to establish DDO 
control of systems which require such information. 


4. I recognize this is a broad and difficult subject 
but recent experiences with Congressional investigations and 
other related matters make it appropriate that we take steps 
to insure that data systems for management purposes have 
effective security. Your attention to this matter is most 
appreciated. 


Theodore G. Shackley 
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